Previously we only blocked exact matches to "next=favicon.ico". Now,
we'll also block "next=/favicon.ico" and any other variations.